Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7pehlb4tsXB5pAxLdSGuHLxzlI.cer
File: a7pehlb4tsXB5pAxLdSGuHLxzlI.cer (raw, json)
Hash identifier: 0R/v5PiFk/oi5nvQo2nIrZM8vXtpZUTy2OoUZ2qnhlQ=
Subject key identifier: 6B:BA:5E:86:56:F8:B6:C5:C1:E6:90:31:2D:D4:86:B8:72:F1:CE:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AA14910848
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/746fc1-a112-4ee1-b617-f0a0cde9a639/1/a7pehlb4tsXB5pAxLdSGuHLxzlI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/746fc1-a112-4ee1-b617-f0a0cde9a639/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:04:34 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.10.24.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 730489489480 (0xaa14910848)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:04:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bba5e8656f8b6c5c1e690312dd486b872f1ce52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e4:76:b2:82:50:5f:cd:44:ab:87:f8:01:6d:
e1:64:b8:7f:59:52:a3:c6:f7:e2:dc:3f:8c:0f:74:
d5:8b:9e:2a:99:5c:b5:0a:0e:93:1a:c6:2f:6a:48:
1a:04:e8:a5:9e:e6:01:e1:41:94:5d:26:e8:ee:aa:
a2:63:26:af:33:04:bb:4a:21:68:a4:e1:18:e0:af:
aa:56:42:c5:70:80:ea:28:e2:f0:da:7e:11:ff:a8:
bf:56:8b:cf:a3:ea:e5:22:bd:fe:d7:62:fc:d7:8a:
b4:b3:95:d2:89:11:88:00:30:be:0c:db:2c:9c:9d:
af:73:53:80:ad:9b:1c:73:84:e8:25:ac:d7:6d:5e:
ce:fa:1d:62:7e:3a:a5:30:45:58:0b:94:21:e1:ee:
66:11:40:95:02:a4:d7:a1:42:1e:32:6a:c5:04:a3:
06:f7:13:39:86:fc:90:d1:5e:0b:08:37:a2:46:14:
6a:57:06:0b:ff:bc:5e:09:ff:7a:fa:c0:8f:78:df:
4b:5d:68:29:33:9d:7e:e9:bf:81:2e:f1:a0:90:48:
7a:7c:bd:84:28:5e:d6:df:3d:24:ca:40:ac:28:fa:
0b:01:67:00:8e:f2:07:a6:6f:fa:ce:49:cf:20:7b:
78:ac:67:1f:7b:2f:24:a3:be:19:e0:4c:af:94:42:
c3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BA:5E:86:56:F8:B6:C5:C1:E6:90:31:2D:D4:86:B8:72:F1:CE:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/746fc1-a112-4ee1-b617-f0a0cde9a639/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/746fc1-a112-4ee1-b617-f0a0cde9a639/1/a7pehlb4tsXB5pAxLdSGuHLxzlI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.24.0/22
Signature Algorithm: sha256WithRSAEncryption
39:20:77:d6:9e:6b:4d:cc:68:dd:4f:f0:2a:f1:72:a2:cf:f8:
e5:99:74:cb:c2:56:d2:41:87:61:e8:ad:2c:69:a1:43:50:04:
1a:ea:15:d0:e9:93:cd:c5:7d:00:f5:6c:9c:10:2b:d0:03:60:
27:f6:a3:2b:dd:89:ca:a1:9b:6f:81:fb:8d:ab:d6:02:4e:fc:
e5:32:ad:eb:91:9c:5b:c2:34:f8:df:db:63:3e:66:fc:a5:fd:
06:97:3d:03:16:d7:48:d8:f9:c4:2e:99:f7:1e:89:81:e4:eb:
d2:21:89:2d:e0:d4:c6:1e:51:e0:4c:67:4b:3c:a0:26:8a:75:
a1:a6:3b:97:0e:ad:d5:7f:69:bd:ff:d6:53:2c:33:eb:1e:a0:
b9:cf:94:4d:a2:6b:6a:5a:c4:df:4f:df:75:75:b9:a0:29:12:
cc:78:4b:95:68:52:34:06:0e:b2:6b:ac:93:55:e7:a7:54:90:
48:0c:8e:f8:5d:7a:da:e0:62:69:36:ef:5c:50:0b:ab:62:05:
7a:81:94:0e:f4:b3:0c:40:f1:bf:97:f7:eb:b0:4e:1e:63:34:
4c:b2:84:25:1d:52:8e:8e:d4:1b:aa:60:52:4d:c5:ff:e9:6a:
b8:b6:86:05:6b:da:d5:eb:3a:3f:ca:92:ad:64:6a:9e:1c:cf:
69:24:89:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:07 2024 by rpki-client on console-ams.rpki-client.org